* Set X11Forwarding to yes in the default sshd_config (new installs only).

  At least when X11UseLocalhost is turned on, which is the default, the
  security risks of using X11 forwarding are risks to the client, not to
  the server (closes: #320104).

1 files changed, 4 insertions, 0 deletions

diff --git a/debian/changelog b/debian/changelog
index 4f1e2e392..d8e84e46d 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -17,6 +17,10 @@ openssh (1:4.2p1-1) UNRELEASED; urgency=low
   * debian/rules: Resynchronise CFLAGS with that generated by configure.
   * openssh-client and openssh-server conflict with pre-split ssh to avoid
     problems when ssh is left un-upgraded (closes: #324695).
+  * Set X11Forwarding to yes in the default sshd_config (new installs only).
+    At least when X11UseLocalhost is turned on, which is the default, the
+    security risks of using X11 forwarding are risks to the client, not to
+    the server (closes: #320104).
 
  -- Colin Watson <cjwatson@debian.org>  Wed, 14 Sep 2005 13:35:17 +0100